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CLAIMS: 



1 . An apparatus for decoding a stream of data, the apparatus comprising 

- a decoder for decrypting data from the stream, using decryption control words; 

- a secure device coupled to the decoder, the secure device comprising 

- a memory space for storing at least two items of entitlement information; 
5 - an input for receiving messages from the apparatus, and 

- an execution unit arranged to respond to the messages, by selecting selected on of the items 
from among the at least two items, if stored, dependent on a content of the messages, the 
execution unit enabling sending of the control words to the decoder subject to the presence 
and validity of the selected one of the items, after decryption of the control word with a 

10 decryption key associated with the selected one of the items. 

2. An apparatus according to Claim 1, the apparatus comprising a detector for 
determining a source of the stream of data, the detector being coupled to the input of the 
secure device, to control information in the messages that specifies the source, the execution 

1 5 unit selecting from the items dependent on the specified source of the stream. 

3. An apparatus according to Claim 1 , the apparatus comprising a detector 
arranged to detect whether the stream is a partial stream selected from a larger stream, the 
detector controlling the content of the messages dependent on whether the stream is detected 

20 to be a partial stream or not respectively, the execution unit selecting a first one of the items 
and a second one of the items dependent on whether the stream is detected to be a partial 
stream or not respectively. 

4. An apparatus according to Claim 3, wherein the detector is arranged to detect 
25 whether the stream is a partial stream dependent on the presence of a section in the stream 

that contains a table that describes the selection of the partial stream, the detector supplying 
encrypted control word information retrieved through said table to the secure device for use 
in supplying the control words to the decoder in case of a partial stream, the detector 
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supplying encrypted control word information retrieved through a dedicated conditional 
access table from the stream in case of a complete stream. 

5. A method of storing a stream of data, the method comprising extracting data 
5 for a selected part of the stream and storing the data for the selected part but not a remainder 

of the stream, together with a selection information table that describes the selection made 
from the stream, the selection information table containing information necessary for 
accessing encrypted control word information for use in decrypting the selected part of the 
stream. 

10 

6. An apparatus according to Claim I, wherein the secure device comprises a 
further memory space for storing acceptance information, the execution unit being arranged 
to execute first commands for updating the items of entitlement information, and second 
commands for updating the acceptance information, the execution unit effecting updates of 

1 5 any of the items in response to the first commands only if these first commands contain 

validation information that matches the acceptance information stored in the further memory 
space when these further commands are received. 

7. A method of decoding a stream of data, the method comprising 
20 - decrypting data from the stream, using decryption control words; 

- supplying the control words with a secure device enable by one of at least two items of 
entitlement information, that are stored in the secure device sending a message to the secure 
device to enable sending of the control words to the decoder subject to the presence of a 
selected one of the items of entitlement information, the control words being decrypted with 
25 a decryption key associated with the selected one of the items, the selected one of the items 
being specified by the message. 



